Re: Custom Build Errors
Neil Horman <[email protected]> Wed, 15 Apr 2026 10:53:59 -0400
| Newsgroups | gmane.comp.encryption.openssl.user |
|---|---|
| Message-ID | <CAJbOq15n9oWvD=SW6hBwh6eSbuVwgfs_v7uzm23Vsp1NEdn09Q@mail.gmail.com> |
--00000000000073b2d2064f80e307
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Mark-
Based on what you've described, is it possible that, when you tried to
make use of 3.1.2 provider with the 3.6 library that you, in addition to
copying the 3.1.2 fips.so file from your 3.1.2 build, you also copied the
3.1.2 libcrypto.so.3 and libssl.so.3 files to the 3.6 directory? That
would also result in the errors that you are seeing. Only the fips.so file
should have been copied from the 3.1.2 build.
Neil
On Wed, Apr 15, 2026 at 10:34=E2=80=AFAM Mark Sigsbee <[email protected]> =
wrote:
> Honestly, I've been following so may threads trying to resolve this, at
> this point I'm not sure what I did. I do know that both of the lib*.so.3
> files are in the root folder (openssl-3.6.0).
>
> $ sudo echo $LD_LIBRARY_PATH
> /PKI/openssl-3.6.0
>
> I get the same error when re-executing the command.
>
> On Wed, Apr 15, 2026 at 9:46=E2=80=AFAM Neil Horman <[email protected]>=
wrote:
>
>> did you run make install to put openssl-3.6 in that directory? Or is
>> that your build directory? If its the latter then the libraries
>> (libcrypto.so.3 and libssl.so.3) will be in the root of that subtree, an=
d
>> LD_LIBRARY_PATH should just be set to /PKI/openssl-3.6.0
>>
>> Neil
>>
>>
>> On Wed, Apr 15, 2026 at 9:45=E2=80=AFAM Mark Sigsbee <[email protected]=
> wrote:
>>
>>> Thanks for the response.
>>>
>>> /PKI/openssl-3.6.0/lib
>>>
>>> Doesn't exist.
>>>
>>> On Wed, Apr 15, 2026 at 9:31=E2=80=AFAM Neil Horman <[email protected]=
g> wrote:
>>>
>>>> you don't have the library search path configured correctly on your
>>>> platform. Try running:
>>>>
>>>> LD_LIBRARY_PATH=3D/PKI/openssl-3.6.0/lib PKI/openssl-3.6.0/apps/openss=
l
>>>> list -providers -verbose
>>>>
>>>> That will allow the application to run. You may also need to set
>>>> OPENSSL_CONF and OPENSSL_MODULES appropriately to find the needed
>>>> configuration and provider DSO's
>>>>
>>>> To avoid needing to set these values you need to configure openssl
>>>> using the --prefix option to set the latter two variables automaticall=
y.
>>>> To avoid the need for LD_LIBRARY_PATH, you either need to configure yo=
ur
>>>> environment to add /PKI/openssl-3.6.0/lib[64] to the library search pa=
th
>>>> globally, or install the library to a location already in the search p=
ath
>>>> (though the latter isn't recommended if you are using a system with a
>>>> default openssl already configured there).
>>>>
>>>> Neil
>>>>
>>>>
>>>> On Wed, Apr 15, 2026 at 9:13=E2=80=AFAM Mark Sigsbee <[email protected]=
om>
>>>> wrote:
>>>>
>>>>> I'm trying to build 3.6.0 with 3.2.1 for its approved FIPS library on
>>>>> Ubuntu 22.04. I know the default version of OpenSSL is 3.0 and basica=
lly
>>>>> leave it alone or the world will come to an end.
>>>>>
>>>>> I'm building a newer version hoping to resolve issues that I'm gettin=
g
>>>>> with 3.0 and confirmed by Ubuntu Pro support.
>>>>>
>>>>> I d/l'ed both into $ /PKI.
>>>>> I followed the build instructions provided here: openssl/README-FIPS=
.md
>>>>> at master =C2=B7 openssl/openssl
>>>>> <https://github.com/openssl/openssl/blob/master/README-FIPS.md>
>>>>>
>>>>> My check agrees with the check results in the readme.
>>>>>
>>>>> When I execute:
>>>>> $ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbose
>>>>>
>>>>> I get this:
>>>>> /PKI$ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbose
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libssl.so.3:
>>>>> version `OPENSSL_3.4.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libssl.so.3:
>>>>> version `OPENSSL_3.2.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3=
:
>>>>> version `OPENSSL_3.0.9' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3=
:
>>>>> version `OPENSSL_3.3.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3=
:
>>>>> version `OPENSSL_3.5.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3=
:
>>>>> version `OPENSSL_3.6.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3=
:
>>>>> version `OPENSSL_3.4.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>> /PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3=
:
>>>>> version `OPENSSL_3.2.0' not found (required by
>>>>> /PKI/openssl-3.6.0/apps/openssl)
>>>>>
>>>>> How do I correct this and get my desired result?
>>>>>
>>>>> --
>>>>> You received this message because you are subscribed to the Google
>>>>> Groups "openssl-users" group.
>>>>> To unsubscribe from this group and stop receiving emails from it, sen=
d
>>>>> an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
>>>>> To view this discussion visit
>>>>> https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqvXL=
Pc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com
>>>>> <https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPqvX=
LPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com?utm_medium=
=3Demail&utm_source=3Dfooter>
>>>>> .
>>>>>
>>>>
--=20
You received this message because you are subscribed to the Google Groups "=
openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msg=
id/openssl-users/CAJbOq15n9oWvD%3DSW6hBwh6eSbuVwgfs_v7uzm23Vsp1NEdn09Q%40ma=
il.gmail.com.
--00000000000073b2d2064f80e307
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr">Mark-<div>=C2=A0 =C2=A0 =C2=A0Based on what you've des=
cribed, is it possible that, when you tried to make use of 3.1.2 provider w=
ith the 3.6 library that you, in addition to copying the 3.1.2 fips.so file=
from your 3.1.2 build, you also copied the 3.1.2 libcrypto.so.3 and libssl=
.so.3 files to the 3.6 directory?=C2=A0 That would also result in the error=
s that you are seeing.=C2=A0 Only the fips.so file should have been copied =
from the 3.1.2 build.</div><div><br></div><div>Neil</div><div><br></div></d=
iv><br><div class=3D"gmail_quote gmail_quote_container"><div dir=3D"ltr" cl=
ass=3D"gmail_attr">On Wed, Apr 15, 2026 at 10:34=E2=80=AFAM Mark Sigsbee &l=
t;<a href=3D"mailto:[email protected]">[email protected]</a>> wrote:<b=
r></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex=
;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">=
Honestly, I've been following so may threads trying to resolve this, at=
this point I'm not sure what I did.=C2=A0 I do know that both of the l=
ib*.so.3 files are in the root folder (openssl-3.6.0).<br><br>$ sudo echo $=
LD_LIBRARY_PATH<div>/PKI/openssl-3.6.0<br><br>I get the same error when re-=
executing the command.</div></div><br><div class=3D"gmail_quote"><div dir=
=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at 9:46=E2=80=AFAM Neil =
Horman <<a href=3D"mailto:[email protected]" target=3D"_blank">nhorman=
@openssl.org</a>> wrote:<br></div><blockquote class=3D"gmail_quote" styl=
e=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddin=
g-left:1ex"><div dir=3D"ltr">did you run make install to put openssl-3.6 in=
that directory?=C2=A0 Or is that your build directory?=C2=A0 If its the la=
tter then the libraries (libcrypto.so.3 and libssl.so.3) will be in the roo=
t of that subtree, and LD_LIBRARY_PATH should just be set to /PKI/openssl-3=
.6.0<div><br></div><div>Neil</div><div><br></div></div><br><div class=3D"gm=
ail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at 9:=
45=E2=80=AFAM Mark Sigsbee <<a href=3D"mailto:[email protected]" target=
=3D"_blank">[email protected]</a>> wrote:<br></div><blockquote class=3D=
"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(2=
04,204,204);padding-left:1ex"><div dir=3D"ltr">Thanks for the response.<br>=
<br>/PKI/openssl-3.6.0/lib<br><br>Doesn't exist.</div><br><div class=3D=
"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15, 2026 at=
9:31=E2=80=AFAM Neil Horman <<a href=3D"mailto:[email protected]" tar=
get=3D"_blank">[email protected]</a>> wrote:<br></div><blockquote clas=
s=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid r=
gb(204,204,204);padding-left:1ex"><div dir=3D"ltr">you=C2=A0don't have =
the library search path configured correctly on your platform.=C2=A0 Try ru=
nning:<div><br></div><div>LD_LIBRARY_PATH=3D/PKI/openssl-3.6.0/lib PKI/open=
ssl-3.6.0/apps/openssl list -providers -verbose</div><div><br></div><div>Th=
at will allow the application to run.=C2=A0 You may also need to set OPENSS=
L_CONF and OPENSSL_MODULES appropriately to find the needed configuration a=
nd provider DSO's</div><div><br></div><div>To avoid needing to set thes=
e values you need to configure openssl using the --prefix option to set the=
latter two variables=C2=A0automatically.=C2=A0 To avoid the need for LD_LI=
BRARY_PATH, you either need to configure your environment to add /PKI/opens=
sl-3.6.0/lib[64] to the library search path globally, or install the librar=
y to a location already in the search path (though the latter isn't rec=
ommended if you are using a system with a default openssl already configure=
d there).</div><div><br></div><div>Neil</div><div><br></div></div><br><div =
class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Apr 15,=
2026 at 9:13=E2=80=AFAM Mark Sigsbee <<a href=3D"mailto:msigsbee@gmail.=
com" target=3D"_blank">[email protected]</a>> wrote:<br></div><blockquo=
te class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px =
solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr">I'm trying to=
build 3.6.0 with 3.2.1 for its approved FIPS library on Ubuntu 22.04. I kn=
ow the default version of OpenSSL is 3.0 and basically leave it alone or th=
e world will come to an end.<br><br>I'm building a newer version hoping=
to resolve issues that I'm getting with 3.0 and confirmed by Ubuntu Pr=
o support.<div><br>I d/l'ed both into $ /PKI.<br>I followed the build i=
nstructions provided here:=C2=A0
<a href=3D"https://github.com/openssl/openssl/blob/master/README-FIPS.md" t=
arget=3D"_blank">openssl/README-FIPS.md at master =C2=B7 openssl/openssl</a=
><br><br>My check agrees with the check results in the readme.<br><br>When =
I execute:<br>$ sudo /PKI/openssl-3.6.0/apps/openssl list -providers -verbo=
se<br><br>I get this:<br>/PKI$ sudo /PKI/openssl-3.6.0/apps/openssl list -p=
roviders -verbose<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu=
/libssl.so.3: version `OPENSSL_3.4.0' not found (required by /PKI/opens=
sl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64-linu=
x-gnu/libssl.so.3: version `OPENSSL_3.2.0' not found (required by /PKI/=
openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /lib/x86_64=
-linux-gnu/libcrypto.so.3: version `OPENSSL_3.0.9' not found (required =
by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/openssl: /li=
b/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.3.0' not found (r=
equired by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/apps/open=
ssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.5.0' not =
found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl-3.6.0/a=
pps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL_3.6.0&#=
39; not found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI/openssl=
-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version `OPENSSL=
_3.4.0' not found (required by /PKI/openssl-3.6.0/apps/openssl)<br>/PKI=
/openssl-3.6.0/apps/openssl: /lib/x86_64-linux-gnu/libcrypto.so.3: version =
`OPENSSL_3.2.0' not found (required by /PKI/openssl-3.6.0/apps/openssl)=
<br><br>How do I correct this and get my desired result?=C2=A0<br><div><br>=
</div></div></div>
<p></p>
-- <br>
You received this message because you are subscribed to the Google Groups &=
quot;openssl-users" group.<br>
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org" target=3D"=
_blank">openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org</a>.<br>
To view this discussion visit <a href=3D"https://groups.google.com/a/openss=
l.org/d/msgid/openssl-users/CAPqvXLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFin=
dorQ%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter" target=3D=
"_blank">https://groups.google.com/a/openssl.org/d/msgid/openssl-users/CAPq=
vXLPc7dDaR3S05bmdSAaFJSZ0k5uSmCs0AY_juicFindorQ%40mail.gmail.com</a>.<br>
</blockquote></div>
</blockquote></div>
</blockquote></div>
</blockquote></div>
</blockquote></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;openssl-users" group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:openssl-users+unsubscribe-MCmKBN63+BlAfugRpC6u6w@public.gmane.org">openssl-us=
[email protected]</a>.<br />
To view this discussion visit <a href=3D"https://groups.google.com/a/openss=
l.org/d/msgid/openssl-users/CAJbOq15n9oWvD%3DSW6hBwh6eSbuVwgfs_v7uzm23Vsp1N=
Edn09Q%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gro=
ups.google.com/a/openssl.org/d/msgid/openssl-users/CAJbOq15n9oWvD%3DSW6hBwh=
6eSbuVwgfs_v7uzm23Vsp1NEdn09Q%40mail.gmail.com</a>.<br />
--00000000000073b2d2064f80e307--